Natas3 - natas4

From JaxHax
Jump to navigation Jump to search

Level Goal

There is nothing on this page


Solution

View source shows the following:

<div id="content">
There is nothing on this page
<!-- No more information leaks!! Not even Google will find it this time... -->
</div>


This made me think robots.txt as that's how you can block listings from being picked up by search engines.


http://natas3.natas.labs.overthewire.org/robots.txt shows the following:


User-agent: *
Disallow: /s3cr3t/


navigate to http://natas3.natas.labs.overthewire.org/s3cr3t/ to get a directory listing with 1 file:

[TXT]	users.txt	2014-11-14 10:32 	40


navigate to http://natas3.natas.labs.overthewire.org/s3cr3t/users.txt to get the following:

natas4:Z9tkRkWmpt9Qr7XrR5jWRkgOU901swEZ